openbsd/src/lib/libcrypto/x509v3, branch libressl-v2.7.1

If X509_check_{host,email}() are called with a length of zero, use strlen()

2018-03-20T16:16:59+00:00

to determine the length. This is the documented behaviour and matches the OpenSSL implementation. Issue found by Michael Gmelin . ok tb@

Allow leading . in nameConstraints. from openssl via jabberwock. ok jsing

2017-07-20T19:45:08+00:00

Distinguish between self-issued certificates and self-signed certificates.

2017-06-22T17:28:00+00:00

The certificate verification code has special cases for self-signed certificates and without this change, self-issued certificates (which it seems are common place with openvpn/easyrsa) were also being included in this category. Based on BoringSSL. Thanks to Dale Ghent for assisting in identifying the issue and testing this fix. ok inoguchi@

the XXXfree functions being called accept NULL, so don't check first.

2017-05-02T04:11:08+00:00

ok beck

Send the function codes from the error functions to the bit bucket,

2017-01-29T17:49:23+00:00

as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@

Expand DECLARE_OBJ_BSEARCH_CMP_FN and IMPLEMENT_OBJ_BSEARCH_CMP_FN macros.

2017-01-21T04:44:43+00:00

No change to generated assembly excluding line numbers.

Expand ASN1_ITEM_rptr macros - no change in preprocessor output.

2016-12-30T16:19:24+00:00

Expand ASN1_ITEM_ref and ASN1_ITEM_ptr macros - no change in generated

2016-12-30T15:54:49+00:00

assembly. Of particular interest is ASN1_ITEM_ptr which does nothing and resulted in code like: if (method->it) ASN1_ITEM_free(..., ASN1_ITEM_ptr(method->it));

Remove all DECLARE_ASN1_SET_OF macro usage - since 2000 these have been

2016-12-27T16:05:57+00:00

nothing but markers for utils/mkstack.pl... and we removed the code that generated more macros from these markers in 2014.

Expand DECLARE_ASN1_ITEM macros - no change in preprocessor output.

2016-12-27T15:37:07+00:00